Trust between child domains

[kabutomz]

We have a root domain and several child domains. We try to include one user from one child domain into a global group of other domain, but we can't.
here is my question, must we define a trust?
which kind of trust?

 

[mrdenny]

There are implicit trusts between all domains in a tree already. If you wanted to create a shortcut trust between the two child domains you could, but it is not needed.

Denny

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[mrdenny]

What is the functional level of the domains? Of the forst? Are you using AD 2000 or 2003?

Denny

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[NickFerrar]

Global Groups can only contain members from their own domain. In the domain you want to apply permissions to a resource you should create a Domain Local Group and put your existing Global Group into that and you will also be able to add the user from the other domain directly into the Domain Local Group.

 

[kabutomz]

We have a 2003 forest. Domain functional level is 2003